From 787c82465dde89817a83b954d44fe6699a6b16ee Mon Sep 17 00:00:00 2001 From: Rene Mewissen Date: Thu, 2 Oct 2025 14:05:36 +0200 Subject: [PATCH] not needed --- aide.yml | 42 ------------------------------------------ main.yml | 21 --------------------- 2 files changed, 63 deletions(-) delete mode 100644 aide.yml delete mode 100644 main.yml diff --git a/aide.yml b/aide.yml deleted file mode 100644 index f0e41ea..0000000 --- a/aide.yml +++ /dev/null @@ -1,42 +0,0 @@ ---- -- name: system setup | aide | install aide package - tags: aide,hardening,system - package: - name: aide - state: present - -- name: system setup | aide | check if aide database exists - tags: aide,hardening,system - stat: - path: /var/lib/aide/aide.db - register: aide_db - -- name: system setup | aide | initialize aide database if it does not exist - tags: aide,hardening,system - block: - - name: system setup | aide | run aide --init (this may take a while) - command: aide --config /etc/aide/aide.conf --init - register: aide_init_result - changed_when: "'AIDE, version' in aide_init_result.stdout" - async: 1800 # Allow up to 30 minutes for initialization - poll: 15 - - - name: system setup | aide | copy new database to be the active one - copy: - src: /var/lib/aide/aide.db.new - dest: /var/lib/aide/aide.db - remote_src: true - owner: root - group: root - mode: '0600' - when: aide_init_result.changed - when: not aide_db.stat.exists - -- name: system setup | aide | schedule daily check - tags: aide,hardening,system - cron: - name: "AIDE daily check" - minute: "0" - hour: "5" - job: "/usr/bin/aide --check" - cron_file: aide_check # Creates /etc/cron.d/aide_check \ No newline at end of file diff --git a/main.yml b/main.yml deleted file mode 100644 index 2381d07..0000000 --- a/main.yml +++ /dev/null @@ -1,21 +0,0 @@ ---- -- name: Update_aide_database - block: # This block is now a task within the handler - - name: system setup | aide | run aide --update to check for legitimate changes - tags: aide,hardening,system - command: aide --update - register: aide_update_result - changed_when: "'new database written to' in aide_update_result.stdout" - async: 1800 # Allow up to 30 minutes for update - poll: 15 - - - name: system setup | aide | activate updated database - tags: aide,hardening,system - copy: - src: /var/lib/aide/aide.db.new - dest: /var/lib/aide/aide.db - remote_src: true - owner: root - group: root - mode: '0600' - when: aide_update_result.changed \ No newline at end of file